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TM TtfE CLAIMS: 

Amended claims follow: 

1 . (Currently Amended) A method for analyzing a network utilizing a zone 
controller, comprising: 

(a) receiving network traffic information from a plurality of host controllers; [and] 

(b) reporting on the network traffic information utilizing a plurality of network- 
based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

ftfl wherein a man of a network is pirated based on the network traffic 
information; and 

wherein intrusion detection services are provided based on the network traffic 



information . 



2, (Original) The method as recited in claim 1, and further comprising 
synchronizing a clock with the host controllers, 

3. (Original) The method as recited in claim 1, wherein the network traffic 
infoimation is originally collected by a plurality of agents coupled to the host 
controllers. 

4, (Original) The method as recited in claim 1 , and further comprising identifying a 
zone associated with each of the host controllers. 

5. (Original) The method as recited in claim 4, and further comprising reporting on 
the network traffic information relating to each of the zones. 



PAGE 5/17 * RCVD AT 211512006 3:23:29 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/29 * DNIS:2738300 * CSiD:4089714660 * DURATION (mm-ss):0340 



FEB. 15. 2006 12:34PM ZILKA-KOTAB, PC 



NO. 1 998 . P. 6 



-3- 



6. (Currently Amended) The method as recited in claim 1, and further comprising 
receiving a plurality of the m aps from the host controllers. 

7. (Original) The method as recited in claim 6, and further comprising reporting on 
the network traffic information utilizing the maps. 

8. (Original) The method as recited in claim 1 , and further comprising offloading 
the network traffic information to a database. 

(Currently Amended) A computer program product for analyzing a network 
utilizing a zone controller, comprising: 

computer code for receiving network traffic information from a plurality of host 
controllers; [and] 

computer code for reporting on the network traffic information utilizing a 
plurality of network-based interfaces; [and] 
wherein the host controllers are related to a zone; 
wherein a map of a network is generated based on the netwo rk traffic 
information; and 

wherein intrusion detection services are provided based on the network traffic 
information . 

10. (Original) The computer program product as recited in claim 9, and further 
comprising computer code for synchronizing a clock with the host controllers. 

1 1 . (Original) The computer program product as recited in claim 9, wherein the 
network traffic information is originally collected by a plurality of agents 
coupled to the host controllers. 



9. 

(a) 

00 
(c) 

(el 
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12. (Original) The computer program product as recited in claim 9, and further 
comprising computer code for identifying a zone associated with each of the 
host controllers. 

1 3 . (Original) The computer program product as recited in claim 12, and further 
comprising computer code for reporting on the network traffic information 
relating to each of the zones. 

14 (Currently Amended) The computer program product as recited in claim 9, and 
further comprising computer code for receiving a plurality of the maps from the 
host controllers. 

15. (Original) The computer program product as recited in claim 14, and further 
comprising computer code for reporting on the network traffic information 
utilizing the maps. 

16. (Original) The computer program product as recited in claim 9, and further 
comprising computer code for offloading the network traffic information to a 
database. 

17. (Currently Amended) A system for analyzing a network utilizing a zone 
controller, comprising: 

(a) logic for receiving network traffic information from a plurality of host 
controllers; [and] 

(b) logic for reporting on the network traffic information utilizing a plurality of 
network-based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

( ti) wherein a map of a network is generated based on the network traffic 
information: and 
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(e) wherein intrusion detection services are p r ovided based on the network traffic 
information . 

18. (Original) The system as recited in claim 17, and further comprising logic for 
synchronizing a clock with the host controllers. 

19. (Original) The system as recited in claim 17, wherein the network traffic 
information is originally collected by a plurality of agents coupled to the host 
controllers. 

20. (Original) The system as recited in claim 17, and further comprising logic for 
identifying a zone associated with each of the host controllers. 

21 . (Original) The system as recited in claim 20, and further comprising logic for 
reporting on the network traffic information relating to each of the zones. 

22. (Currently Amended) The system as recited in claim 17, and further comprising 
logic for receiving a plurality of the m aps from the host controllers. 

23. (Original) The system as recited in claim 22, and further comprising logic for 
reporting on the network traffic information utilizing the maps. 

24. (Original) The system as recited in claim 17, and further comprising logic for 
offloading the network traffic information to a database. 

25 . (Currently Amended) A system for analyzing a network utilizing a zone 
controller, comprising: 

(a) means for receiving network traffic information from a plurality of host 
controllers; [and] 
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(b) means for reporting oft the network traffic information utilizing a plurality of 
network-based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

(ri ) Wherein * m m nf a net wor k is generated based on the network traffic , 
information: and 

(gj wherein intrusion detection services a re provided ba sed nn the network traffic 
information . 

26. (Currently Amended) A method for analyzing a network utilizing a zone 
controller, comprising: 

(a) synchronizing a clock with a plurality of host controllers; 

(b) receiving network teaffic information from the host controllers; 

(c) identifying a zone associated with each of the host controllers; 

(d) receiving maps from the host controllers; 

(e) reporting on the network traffic mformation relating to each of the zones 
utilizing a plurality of network-based interfaces and tire maps; [and] 

(f) offloading the network traffic information to a database^ 

(s* wherein the maps are of at least o ne network and are generated based on the 

network traffic information; and 
Qfl wherein intrusion detection servi c es-are provided based on the network traffi c 

information . 

27. (New) The method as recited in claim 1 , wherein the map includes a correlation 
among computers of the network and the network traffic information associated 
therewith. 

28. (New) The method as recited in claim 5, wherein a report is generated including 
a plurality of objects in a tree representation. 
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29. (New) The method as recited in claim 1, wherein a Simple Network 
Management Protocol (SNMP) trap capability is utilized. 

30. (New) The method as recited in claim 1, wherein the intrusion detection services 
include scanning the network traffic information and detecting intrusions in the 
network based on the scanned network traffic information- 

31 . (New) The method as recited in claim 3, wherein the network traffic information 
is collected from a plurality of zone controllers coupled to the host controllers, 

32. (New) The method as recited in claim 31, wherein the intrusion detection 
services are performed by the host controllers and the zone controllers. 

33. (New) The method as recited in claim 31, wherein the host controllers and the 
zone controllers operate based on user-configurable business rules. 

34. (New) The method as recited in claim 5, wherein a fee associated with the 
reporting is determined based on a number of agents, the host controllers, and 
zone controllers. 

35. (New) The method as recited in claim 34, wherein the fee is reoccurring. 
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